Computer Group Based on Active Directory User Group

Conceptually it seems ok; since you’re running in user context there might be a better chance of reaching AD or maybe gpresult gives cached results if the Domain isn’t there.

A couple of things worth noting from the ‘Considerations’ at the top of my override post at Tip - Action Override User settings though -

  • The logged-on user may not have access to the __BESData directory where your run_gpresult.bat is. You might need to copy it to a path the user can read first.
  • The logged-on user may not have access to write to the ProgramData directory, so the write might fail; or even worse, you might get the ‘shadowed’ directories where each user account gets their own view. So for one user it looks like the output file is there, and for another user (or LocalSystem) the file is not there. You might want to have the script output some place the user can write, and then after the ‘wait’ command have the actionscript copy it from the user directory over to ProgramData.